MCP.Market

Package Intel MCP server

online · 100% uptime
by datakoot.com·com.datakoot/npm-pypi-crates-packages·v2.1.0
No reviews yet

Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.

A91/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Package Intel MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Package Intel MCP tools (6)

write = sends, deletes, buys or posts
  • package_dependenciesFree

    List the direct dependencies of a specific package version (defaults to latest), via deps.dev. Lets an agent understand what a package pulls in before adding it. Ecosystems: npm, pypi, cargo.

  • package_downloadsFree

    Get popularity/download statistics for a package (recent download counts). Useful for judging how widely used and battle-tested a dependency is. Ecosystems: npm, pypi, cargo.

  • package_healthFree

    A composite trust/health check for a package an agent is considering: latest-release recency, deprecation status, license present, maintainer count, dependency count, and any known security advisories (via deps.dev). Returns a summary an agent can act on. Ecosystems: npm, pypi, cargo.

  • package_infoFree

    Get core metadata for a package: latest version, description, license, homepage, source repository, maintainers, and whether it is deprecated. Use before an agent installs or recommends a dependency. Ecosystems: npm, pypi, cargo.

  • package_searchFree

    Search for packages by keyword and get the top matches with descriptions. Supported ecosystems: npm and cargo (PyPI has no public search API).

  • package_versionsFree

    List recent released versions of a package with release dates (most recent first). Helps an agent pick a version or check how actively it is maintained. Ecosystems: npm, pypi, cargo.

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 285ms20/20
  • Tool poisoning6 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Package Intel MCP compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 85% of 48,243 servers
Tools
6
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
43 ms
faster than 94% of 30,027 servers

What its tools let an agent do: 6 read

Install Package Intel MCP in Claude Code, Cursor or VS Code

claude mcp add --transport http npm-pypi-crates-packages https://package.datakoot.com/mcp
Add to Cursor

What the publisher says

From the Package Intel MCP repository's README, as published. We do not edit it. Read it on GitHub

Package Intel MCP — by Datakoot

Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency before it installs it. Covers npm, PyPI and crates.io. No API keys.

Tools

Every tool accepts an ecosystem of npm, pypi, or crates. No API keys required.

Quick start

claude mcp add --transport http package-intel https://package.datakoot.com/mcp

Or point any MCP client at https://package.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

Paste this into a terminal:

curl -s https://package.datakoot.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'

You get a supply-chain health snapshot for the npm package express — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.

Or point any MCP client at the URL and just ask your agent, in plain language:

  • "How healthy is the npm package express?"
  • "Before I add left-pad, is it actively maintained and widely used?"

Data & attribution

Data comes from the public registry APIs for npm, PyPI and crates.io, plus deps.dev (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.

Part of Datakoot — keyless intelligence APIs for AI agents.

Nothing above is checked by us. What we check is on the safety report.

Package Intel MCP: common questions

Is Package Intel MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Package Intel MCP safety report
How do I install Package Intel MCP?
It runs remotely at package.datakoot.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Package Intel MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Package Intel MCP maintained?
The last commit was 27 days ago (2026-10-09). The latest release is v2.1.0.
Is Package Intel MCP up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Package Intel MCP compare with other MCP servers?
safety score 91/100 (higher than 85% of 48,243 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from datakoot.com →